Privacy Policy
Heartbeat's privacy policy is the Freedom! Privacy Policy (last modified Feb 2, 2024), shared by Freedom! Family Limited's sites; it says Heartbeat collects only what it needs, does not sell data, signs you in with Google, reads profile, email and channel data through YouTube's API services, uses cookies, and is not for children under 13.
Heartbeat's privacy policy, linked as "Privacy policy" in the sidebar of h.ki, is the Freedom! Privacy Policy, last modified Feb 2, 2024: one policy for every site and game of Freedom! Family Limited, h.ki among them. In summary it says Freedom! collects only the information needed for what you do, "We don't sell it to third parties", signs you in with Google so it never holds your password, and uses cookies and server logs on every visit. The first thing to know, though, is that most of what you make on Heartbeat is public by design: as the Dec 25, 2023 features video shows, other people visiting your heartbeat "can still see your favorites all your moments and all the videos" you made moments for.
Quick facts
| Policy | Freedom! Privacy Policy, at h.ki/policies/privacy |
| Last modified | Feb 2, 2024 |
| Company | Freedom! Family Limited (the "Company") |
| Covers | Its games and a list of sites, including h.ki and the older .tm sites |
| Sign-in | Google Sign-In; "we do not store nor control your password" |
| YouTube data | Profile, email, channel and video metadata, and channel analytics |
| Children | Not designed for or marketed to children under 13 (COPPA section) |
| Selling data | "We don't sell it to third parties" |
| Contact | freedom.support.tm (the policy's address; it did not answer on Nov 7, 2026) |
| Terms of service | None linked from h.ki's sidebar or footer (Nov 7, 2026) |
What is public on Heartbeat
Before the policy, the product: Heartbeat is a publishing site, so what you make is meant to be seen. Your heartbeat (h.ki/@<handle>) shows your name, picture, follower count, moments, favorites, playlists, vikis and photos galleries you made public. The public API returns a moment's creator with name, handle and avatar to anyone who asks (Heartbeat Public API). Moments and playlists have a visibility, and Heartbeat Photos galleries can be Public, Unlisted or Private (Heartbeat Photos); what choices the moment editor offers is visible only signed in.
What the policy says it collects
- From every visitor, signed in or not: through cookies and web server logs, the browser type, language preference, referring site, pages requested, and the date and time of each request, plus IP addresses, "to better understand our Site traffic, and to monitor and protect the security of the Sites."
- From account holders: details that "could include your name, username, email address, postal address, Skype and other contact details, whether you are of legal age, your payment preferences, your feedback, and other details."
- Through YouTube's API services: "profile, email, channel and video metadata, and channel analytics", used to decide what you may access, run your account and "generate reports for you."
- Not: sensitive information such as health or religion, which the policy says it does not request.
Seen on Nov 7, 2026, h.ki's pages also send analytics beacons to a.h.ki/collect, several per page, which fits the policy's cookies and traffic section.
How it says the data is used and shared
The policy lists keeping you updated on the sites, improving products, "collaboration or brand deal opportunities", data analysis and research, and publishing aggregated statistics or public information such as a channel name. It names when data may be shared: with sponsorship providers checking a channel you linked in Freedom!'s talent agency dashboard, with platforms you signed up to through Freedom!, in a merger or sale (with notice "before any transfer"), and with authorities or fraud-prevention companies where the law permits or requires it.
Other companies may set cookies too: analytics providers and "third parties that deliver content (like videos from YouTube)". Every video on Heartbeat plays in YouTube's embedded player, so YouTube's own policies apply while it plays; the policy points readers to the YouTube Terms of Service and the Google Privacy Policy.
Your choices
- Cookies: you can set your browser to refuse them, though "you may not be able to use some portions of our Sites".
- YouTube access: you can revoke a site's access to data read through YouTube's API services "via the Google security settings page".
- Deleting: "At any time, you may delete any data you provided when signed into a Site."
- Retention: data is kept "only as long as necessary"; accounts that break the terms, are "inactive for at least six months", or must be removed under rules such as the GDPR "will be purged."
The extension's disclosures
The Heartbeat Extension's Chrome Web Store listing (publisher Freedom! Family Limited, read Nov 7, 2026) declares that it handles personally identifiable information, web history, user activity and website content, and that the data is not sold or used for purposes unrelated to the extension. That is what a browser extension that reads the YouTube page you are on and saves the second you press H would need.
What we noticed
We think the policy is broad rather than specific to Heartbeat. It was written for a family of Freedom! sites and games (it mentions Unity analytics, in-app purchases and a talent agency dashboard) and was last changed on Feb 2, 2024, before Freedom! moved its .tm sites to h.ki in October 2024 (History of Heartbeat). It lists h.ki but not heartbeat.me, Heartbeat Photos or the extension by name, and its contact address, freedom.support.tm, did not answer on Nov 7, 2026 (freedom.support.h.ki redirected to freedom-support.h.ki that day). It refers to "the Company's Terms of Service", which we could not find linked from h.ki. None of that changes what it promises; it does mean a reader has to map its general wording onto Heartbeat themselves.
Frequently asked questions
Where is Heartbeat's privacy policy?
At h.ki/policies/privacy, linked as "Privacy policy" at the foot of the sidebar. It is the Freedom! Privacy Policy, last modified Feb 2, 2024.
Does Heartbeat sell my data?
The policy says "We don't sell it to third parties."
Does Heartbeat store my password?
No. It uses Google Sign-In and, in the policy's words, does "not store nor control your password".
Is Heartbeat for children?
The policy says none of Freedom!'s games or sites are designed or intended for children under 13.
Are my Heartbeat moments public?
The ones you publish are: anyone can see a heartbeat's moments, favorites and videos, and the public API returns a moment with its creator's name and avatar. Moments carry a visibility setting, but the editor's choices are visible only signed in.
How do I delete my data on Heartbeat?
The policy says you may delete data you provided while signed in, and that accounts inactive for six months are purged.
Sources
- Freedom! Privacy Policy, last modified Feb 2, 2024, read Nov 7, 2026
- Heartbeat features - No fluff, Freedom!, Dec 25, 2023 (video)
- Heartbeat extension on the Chrome Web Store, read Nov 7, 2026
- Vi.ki's visits to h.ki in Chrome, signed out, and its requests to freedom.support.tm and freedom.support.h.ki, Nov 7, 2026
Moments
Heartbeat features - No fluff
Freedom!
See also
-
Heartbeat Public APIHeartbeat has no documented API, but the JSON calls its own pages make under h.ki/api answer without sign-in; seven were seen on Nov 7, 2026 (a moment, a playlist's or viki's moments, a video's community moments, suggestions, comments, tags and a heartbeat's playlists), each wrapped in {"code":0,"data":{"objList":[...]}}.
-
Heartbeat PhotosHeartbeat Photos (h.ki/photos/) is Heartbeat's photo gallery, where hovering a thumbnail shows the full image without a click. Upload by drag and drop, share a gallery by its link, and drive it with keys such as T, V, C, I, H, R, Q, G H and G V.
-
Heartbeat ExtensionThe Heartbeat extension for Chrome lets you press H on any YouTube video to save a moment to your heartbeat, shows a Heart button that lists your moments, and shows a channel's Channel ID on YouTube. It is free, published by Freedom! Family Limited.
-
History of HeartbeatHeartbeat began in August 2023 with Heartbeat Photos (Aug 3) and the Heartbeat Moments Chrome extension (Aug 18) at heartbeat.photos and heartbeat.love, moved to h.ki by November 2023, added Shorts, vikis, tools, riddles, trivia and pretty links through 2024 and 2025, and took over Freedom!'s .tm domains on Oct 1, 2024.
-
Sign-in and AccountsHeartbeat accounts use Google sign-in only, with no password of Heartbeat's own; signed out you can watch moments, read vikis, search and play riddles, trivia and tools, while saving moments, favorites, follows, comments and Heartbeat Photos need an account.